This notice explains how EPCOTEC GmbH processes personal data when you use this website or contact us. It is based on Articles 12 and 13 GDPR and the German Telecommunications Digital Services Data Protection Act (TDDDG).
1. Controller
EPCOTEC GmbH
Am Rollefer Berg 56
52078 Aachen, Germany
Telephone: +49 241 5710 7742
Email: info@epcotec.de
2. Website access and server log files
When the website is accessed, technical data may be processed automatically, including IP address, date and time, requested page or file, referrer, browser and operating-system information, host name, response status and transferred data volume. Processing is required to deliver the website, maintain stability and security, investigate errors and prevent misuse. The legal basis is Article 6(1)(f) GDPR. EPCOTEC’s legitimate interests are the secure, reliable and efficient operation of its digital services.
3. Hosting and technical service providers
The website is delivered using hosting, content-delivery, security and IT service providers acting for EPCOTEC. These providers may receive the technical access data required to operate and protect the service. Where a provider acts as processor, it is bound in accordance with Article 28 GDPR. Data may also be disclosed where required by law or necessary to establish, exercise or defend legal claims.
4. Contact by email or telephone
If you contact EPCOTEC, we process your name, contact details, message, correspondence history and related project or company information in order to respond and manage the business relationship. The legal basis is Article 6(1)(b) GDPR where the communication concerns a contract or pre-contractual measures and otherwise Article 6(1)(f) GDPR, based on our legitimate interest in efficient business communication. Where legally required, Article 6(1)(c) GDPR also applies.
5. Necessary storage, cookies and similar technologies
This website does not currently use EPCOTEC-operated advertising cookies, behavioural profiling or marketing analytics. Storage or access on your device may occur only where technically necessary to provide a function expressly requested by you, maintain security or preserve essential session settings. Such access is governed by Section 25(2) TDDDG; any associated processing of personal data is based on Article 6(1)(f) GDPR or, where contractual, Article 6(1)(b) GDPR. If optional services requiring consent are introduced, they will not be activated before the required information and consent mechanism are provided.
6. Images, videos and external links
Images and videos displayed directly on this website are hosted as part of the website and do not, by themselves, connect your browser to a separate social-media or video platform. External links open the website of the respective third-party provider; that provider is independently responsible for any processing after you follow the link.
7. International data transfers
If a technical service provider processes personal data outside the European Economic Area, the transfer takes place only under the conditions of Chapter V GDPR, for example on the basis of an adequacy decision under Article 45 GDPR or appropriate safeguards under Article 46 GDPR, such as the EU Standard Contractual Clauses, supplemented where necessary by additional protective measures.
8. Storage periods
EPCOTEC stores personal data only for as long as necessary for the relevant purpose. Technical log data is deleted or anonymised when it is no longer required for operation and security, unless a specific incident requires longer retention. Business correspondence is retained for the duration of the enquiry or contractual relationship and subsequently in accordance with applicable commercial and tax retention obligations and statutory limitation periods.
9. Your rights
Subject to the statutory conditions, you have the right to access under Article 15 GDPR, rectification under Article 16, erasure under Article 17, restriction of processing under Article 18, data portability under Article 20 and objection under Article 21 GDPR. Where processing is based on consent, you may withdraw that consent at any time with future effect. To exercise your rights, contact info@epcotec.de.
10. Right to object
Where processing is based on Article 6(1)(f) GDPR, you may object at any time on grounds relating to your particular situation. EPCOTEC will then stop the relevant processing unless compelling legitimate grounds override your interests, rights and freedoms or processing is required for the establishment, exercise or defence of legal claims.
11. Supervisory authority
You have the right to lodge a complaint with a data-protection supervisory authority under Article 77 GDPR. The authority competent for EPCOTEC is generally the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
12. Obligation to provide data and automated decisions
You are not legally obliged to provide personal data through this website. However, certain contact data may be necessary for EPCOTEC to answer an enquiry, prepare an offer or perform a contract. EPCOTEC does not use personal data collected through this website for automated decision-making within the meaning of Article 22 GDPR or for profiling.
13. Security and updates
EPCOTEC uses appropriate technical and organisational measures designed to protect personal data against loss, alteration and unauthorised access. Internet transmission cannot be guaranteed to be completely secure. This notice will be updated when the website, processing activities or legal requirements change.